Context based access control systems for mobile devices

•

0 recomendaciones•437 vistas

Context based access control systems for mobile devices Do Your Projects With Technology Experts To Get this projects Call : 9566355386 / 99625 88976 Web : http://www.lemenizinfotech.com Web : http://www.ieeemaster.com Mail : projects@lemenizinfotech.com Blog : http://ieeeprojectspondicherry.weebly.com Blog : http://www.ieeeprojectsinpondicherry.blogspot.in/ Youtube:https://www.youtube.com/watch?v=eesBNUnKvws

Educación

Do Your Projects With Domain Experts…
Copyright © 2015 LeMeniz Infotech. All rights reserved
Page number 1Page number 1
LeMeniz Infotech
36, 100 Feet Road, Natesan Nagar, Near Indira Gandhi Statue,
Pondicherry-605 005.
Call: 0413-4205444, +91 9566355386, 99625 88976.
Web : www.lemenizinfotech.com / www.ieeemaster.com
Mail : projects@lemenizinfotech.com
Context-Based Access Control Systems for
Mobile Devices
Abstract
Mobile Android applications often have access to sensitive data and
resources on the user device. Misuse of this data by malicious applications may
result in privacy breaches and sensitive data leakage. An example would be a
malicious application surreptitiously recording a confidential business
conversation. The problem arises from the fact that Android users do not have
control over the application capabilities once the applications have been granted
the requested privileges upon installation. In many cases, however, whether an
application may get a privilege depends on the specific user context and thus we
need a context-based access control mechanism by which privileges can be
dynamically granted or revoked to applications based on the specific context of the
user. In this project we propose such an access control mechanism. Our
implementation of context differentiates between closely located subareas within
the same location. We have modified the Android operating system so that context-
based access control restrictions can be specified and enforced. We have
performed several experiments to assess the efficiency of our access control
mechanism and the accuracy of context detection.
EXISTING SYSTEM
Mobile Android applications often have access to sensitive data and
resources on the user device. In location-based policy systems are not accurate
enough to differentiate between nearby locations without extra hardware or
location devices.

Do Your Projects With Domain Experts…
Copyright © 2015 LeMeniz Infotech. All rights reserved
Page number 2Page number 2
LeMeniz Infotech
36, 100 Feet Road, Natesan Nagar, Near Indira Gandhi Statue,
Pondicherry-605 005.
Call: 0413-4205444, +91 9566355386, 99625 88976.
Web : www.lemenizinfotech.com / www.ieeemaster.com
Mail : projects@lemenizinfotech.com
DRAWBACK OF EXISTING SYSTEM
 Sensitive data leakage.
 Easily attacked by malicious.
 Security and privacy risks.
PROPOSED SYSTEM
Context-based access control mechanism by which privileges can be
dynamically granted or revoked to applications based on the specific context of the
user.
Our implementation of context differentiates between closely located subareas
within the same location. We have modified the Android operating system so that
context-based access control restrictions can be specified and enforced.
ADVANTAGE OF PROPOSED SYSTEM
 Assess the efficiency.
 Accuracy of context detection.
SYSTEM SPECIFICATION
Hardware Requirements
System : Pentium IV 2.4 GHz
Hard Disk : 40 GB
Floppy Drive : 1.44 Mb
Monitor : 15 VGA Colour

Do Your Projects With Domain Experts…
Copyright © 2015 LeMeniz Infotech. All rights reserved
Page number 3Page number 3
LeMeniz Infotech
36, 100 Feet Road, Natesan Nagar, Near Indira Gandhi Statue,
Pondicherry-605 005.
Call: 0413-4205444, +91 9566355386, 99625 88976.
Web : www.lemenizinfotech.com / www.ieeemaster.com
Mail : projects@lemenizinfotech.com
Mouse : Logitech
Ram : 512 Mb
Software Requirements
Operating system : Windows Family
Tools : eclipse
Technology Used : Java
Backend Used : SQLITE

Más contenido relacionado

La actualidad más candente

A profile is an extremely sensitive optional configuration file which allows to re-define different system functionality parameters such as mobile carrier settings, Mobile Device Management (MDM) settings and networking settings. Through social engineering techniques such as email phishing or a fake URL, an attacker can convince a user to install a malicious profile and compromise the device settings to silently route network traffic from the device to a remote proxy over SSL using a self-signed certificate. The impact: Once the attacker has re-routed all traffic from the mobile device to their own server, they can begin to install other malicious apps and decrypt SSL communications.

iOS Threats - Malicious Configuration Profiles, Threat, Detection & Mitigation

Lacoon Mobile Security

Security and information assurance

bdemchak

Mobile security

priyanka pandey

Spe security and privacy enhancement framework for mobile devices Do Your Projects With Technology Experts To Get this projects Call : 9566355386 / 99625 88976 Web : http://www.lemenizinfotech.com Web : http://www.ieeemaster.com Mail : projects@lemenizinfotech.com Blog : http://ieeeprojectspondicherry.weebly.com Blog : http://www.ieeeprojectsinpondicherry.blogspot.in/ Youtube:https://www.youtube.com/watch?v=eesBNUnKvws

Spe security and privacy enhancement framework for mobile devices

LeMeniz Infotech

Mobile database security threats

Akhil Kumar

Application security testing an integrated approach

Idexcel Technologies

Chapter 4

NorazlinaAbdullah4

Mobile app security

whitecryption

Generic threats to mobile application

Vikrant Kansal

Cs a multi-national oil and gas company

Liora R. Herman

Basics of IoT Testing

Sunil Agrawala, MS, PMP

Query Pattern Access and Fuzzy Clustering Based Intrusion Detection System

Simran Seth

New trends in Payments Security: NFC & Mobile

SISA Information Security Pvt.Ltd

Vulnerabilities In Industrial Control System

Centextech

The dependence of users on smartphones to accomplish their daily works is growing increasingly. Every day many mobile applications are downloaded and installed by the users to perform different desirable tasks for them. Before it can be installed in the smartphone, the mobile application requests from the user granting some sort of permissions, which may include the access right to users’ sensitive resources. In absence of a security mechanism that can enforce fine-grained permission control, the application may abuse the granted permissions and thus violates the security of sensitive resources. This paper proposes an attribute-based permission model ABP for Android smartphones to control how the mobile application can exercise the granted permissions. The finer granularity of the permission language used by ABP model ensures that the mobile application cannot violate the user’s security. By using ABP model, the users can enjoy the useful tasks the mobile applications provide while protecting sensitive resources from unauthorized use.

Attribute-based Permission Model for Android Smartphones

IJCSIS Research Publications

Millions of people worldwide have Internet access today. Intrusion detection technology is a modern wave of information technology monitoring devices to deter malicious activities. Malware development malicious software is a vital problem when it comes to designing intrusion detection systems IDS . The key challenge is to recognize unknown and hidden malware, because malware writers use various evasion techniques to mask information to avoid IDS detection. Malicious attacks have become more sophisticated and Furthermore, threats to security have increased, including a zero day attack on internet users. Through the use of IT in our daily lives, computer security has become critical. Cyber threats are becoming more complex and pose growing challenges when it comes to successful intrusion detection. Failure to prevent invading information, such as data privacy, integrity and availability can undermine the credibility of security services. Specific intrusion detection approaches were proposed in the literature to combat computer security threats. This paper consists of a literature survey of the IDS that uses program algorithms to use specific data collection and forensic techniques in real time. Data mining techniques for cyber research are introduced in support of intrusion detection. Mohammed I. Alghamdi "An Assessment of Intrusion Detection System (IDS) and Data-Set Overview: A Comprehensive Review of Recent Works" Published in International Journal of Trend in Scientific Research and Development (ijtsrd), ISSN: 2456-6470, Volume-5 | Issue-2 , February 2021, URL: https://www.ijtsrd.com/papers/ijtsrd35730.pdf Paper Url: https://www.ijtsrd.com/computer-science/computer-security/35730/an-assessment-of-intrusion-detection-system-ids-and-dataset-overview-a-comprehensive-review-of-recent-works/mohammed-i-alghamdi

An Assessment of Intrusion Detection System IDS and Data Set Overview A Compr...

ijtsrd

Black Hat USA 2014 - A Practical Attack Against Virtual Desktop Infrastructur...

Lacoon Mobile Security

— in distributed computing environment, Mobile agents are mobile autonomous processes which operate on behalf of users (e.g., the Internet). These applications include a specialized search of a middleware services such as an active mail system, large free-text database, electronic malls for shopping, and updated networking devices. Mobile agent systems use less network bandwidth, increase asynchrony among clients and servers, dynamically update server interfaces and introduce concurrency. Due to software components, security of mobile agent is essential in any mobile agent based application. Security services such as Confidentiality, Integrity, Authentication, Authorization and Non-Repudiation are discussed and combat with by the researchers. This work is proposing a new technique for access control area of security for the mobile agents and it will be implemented using an example of shopping cart data sharing for multiple levels.

APPLICATION OF MOBILE AGENTS FOR SECURITY USING MULTILEVEL ACCESS CONTROL

International Journal of Technical Research & Application

200711 002

Nhựt Đình

The Internet of Things (IoT) alludes to the continually developing system of physical articles that component an IP address for web availability, and the correspondence that happens between these items and other Web empowered gadgets and frameworks. The security issues of the Internet of Things (IoT) are straight forwardly identified with the wide utilization of its framework. IoT securities and enhancing the design and several elements of this work showcases various security issues with respect to IoT and thinks of solutions for the issues under the advancements included. Here we are going to do a study of all the security issues existing in the Internet of Things (IoT) alongside an examination of the protection issues that an end-client might confront as an outcome of the spread of IoT. Most of the overview is centred around the security emerging out of the data trade innovations utilized as a part of Internet of Things. As a piece of IoTs, genuine concerns are raised over access of individual data relating to gadget and individual protection. This review tells about the security and protection issues of IoT.

Security Issues and Challenges in Internet of Things – A Review

IJERA Editor

La actualidad más candente (20)

iOS Threats - Malicious Configuration Profiles, Threat, Detection & Mitigation

Security and information assurance

Mobile security

Spe security and privacy enhancement framework for mobile devices

Mobile database security threats

Application security testing an integrated approach

Chapter 4

Mobile app security

Generic threats to mobile application

Cs a multi-national oil and gas company

Basics of IoT Testing

Query Pattern Access and Fuzzy Clustering Based Intrusion Detection System

New trends in Payments Security: NFC & Mobile

Vulnerabilities In Industrial Control System

Attribute-based Permission Model for Android Smartphones

An Assessment of Intrusion Detection System IDS and Data Set Overview A Compr...

Black Hat USA 2014 - A Practical Attack Against Virtual Desktop Infrastructur...

APPLICATION OF MOBILE AGENTS FOR SECURITY USING MULTILEVEL ACCESS CONTROL

200711 002

Security Issues and Challenges in Internet of Things – A Review

Destacado

Cross-Platform Data Access for Android and iPhone

Peter Friese

End of third period

vacablo

Chapter11 new

vmummaneni

There are various access control models, each with a specific intent and purpose. Determining the ideal model for an application can help ensure proper authorization to application resources. Each of the primary models will be covered, including the MAC, DAC, RBAC, and ABAC Access Control models. Examples, challenges, and benefits of each will be discussed to provide a further insight into which solution may best serve an application. Application sensitivity, regulations, and privacy may drive which model is selected.

Access Control Models: Controlling Resource Authorization

Mark Niebergall

Context-Aware Access Control and Presentation of Linked Data

Luca Costabello

Access control

Kamil Izzeldin

Access control presentation

Saqib Raza

Access Control: Principles and Practice

Nabeel Yoosuf

8 Access Control

Alfred Ouyang

Access Control Presentation

Wajahat Rajab

Tao zhang

harishk2

5.marec Svetový deň účinnosti

denisdudas00

Ultra sparse ac link converters

LeMeniz Infotech

Performing initiative data prefetching in distributed file systems for cloud ...

LeMeniz Infotech

Stress analysis cover.ipt

walid elsibai

General analysis and design guideline for a battery buffer system with dcdc c...

LeMeniz Infotech

An adaptive zvs full bridge dc–dc converter with reduced conduction losses an...

LeMeniz Infotech

Analytical model of the half bridge series resonant inverter for improved pow...

LeMeniz Infotech

A novel switched coupled-inductor dc–dc step-up converter and its derivatives

LeMeniz Infotech

Destacado (19)

Cross-Platform Data Access for Android and iPhone

End of third period

Chapter11 new

Access Control Models: Controlling Resource Authorization

Context-Aware Access Control and Presentation of Linked Data

Access control

Access control presentation

Access Control: Principles and Practice

8 Access Control

Access Control Presentation

Tao zhang

5.marec Svetový deň účinnosti

Ultra sparse ac link converters

Performing initiative data prefetching in distributed file systems for cloud ...

Stress analysis cover.ipt

General analysis and design guideline for a battery buffer system with dcdc c...

An adaptive zvs full bridge dc–dc converter with reduced conduction losses an...

Analytical model of the half bridge series resonant inverter for improved pow...

A novel switched coupled-inductor dc–dc step-up converter and its derivatives

Similar a Context based access control systems for mobile devices

Cost effective authentic and anonymous data sharing with forward security

LeMeniz Infotech

Providing privacy aware incentives in mobile sensing systems Do Your Projects With Technology Experts To Get this projects Call : 9566355386 / 99625 88976 Web : http://www.lemenizinfotech.com Web : http://www.ieeemaster.com Mail : projects@lemenizinfotech.com Blog : http://ieeeprojectspondicherry.weebly.com Blog : http://www.ieeeprojectsinpondicherry.blogspot.in/ Youtube:https://www.youtube.com/watch?v=eesBNUnKvws

Providing privacy aware incentives in mobile sensing systems

LeMeniz Infotech

User defined privacy grid system for continuous location-based services Do Your Projects With Technology Experts To Get this projects Call : 9566355386 / 99625 88976 Web : http://www.lemenizinfotech.com Web : http://www.ieeemaster.com Mail : projects@lemenizinfotech.com Blog : http://ieeeprojectspondicherry.weebly.com Blog : http://www.ieeeprojectsinpondicherry.blogspot.in/ Youtube:https://www.youtube.com/watch?v=eesBNUnKvws

User defined privacy grid system for continuous location-based services

LeMeniz Infotech

Decentralized access control with anonymous authentication of data stored in clouds A new decentralized access control scheme is proposed for secure data storage in clouds that supports anonymous authentication. In the proposed scheme, the cloud verifies the authenticity of the series without knowing the user’s identity before storing data. Access control is enabled, in which only valid users are able to decrypt the stored information.

Decentralized access control with anonymous authentication of data stored in ...

LeMeniz Infotech

Secure and distributed data discovery and dissemination in wireless sensor ne...

LeMeniz Infotech

Secure spatial top k query processing via untrusted location-based service pr...

LeMeniz Infotech

Privacy preserving relative location based services for mobile users Do Your Projects With Technology Experts To Get this projects Call : 9566355386 / 99625 88976 Web : http://www.lemenizinfotech.com Web : http://www.ieeemaster.com Mail : projects@lemenizinfotech.com Blog : http://ieeeprojectspondicherry.weebly.com Blog : http://www.ieeeprojectsinpondicherry.blogspot.in/ Youtube:https://www.youtube.com/watch?v=eesBNUnKvws

Privacy preserving relative location based services for mobile users

LeMeniz Infotech

User privacy and data trustworthiness in mobile crowd sensing Do Your Projects With Technology Experts To Get this projects Call : 9566355386 / 99625 88976 Web : http://www.lemenizinfotech.com Web : http://www.ieeemaster.com Mail : projects@lemenizinfotech.com Blog : http://ieeeprojectspondicherry.weebly.com Blog : http://www.ieeeprojectsinpondicherry.blogspot.in/ Youtube:https://www.youtube.com/watch?v=eesBNUnKvws

User privacy and data trustworthiness in mobile crowd sensing

LeMeniz Infotech

Privacy preserving indoor localization on smartphones Do Your Projects With Technology Experts To Get this projects Call : 9566355386 / 99625 88976 Web : http://www.lemenizinfotech.com Web : http://www.ieeemaster.com Mail : projects@lemenizinfotech.com Blog : http://ieeeprojectspondicherry.weebly.com Blog : http://www.ieeeprojectsinpondicherry.blogspot.in/ Youtube:https://www.youtube.com/watch?v=eesBNUnKvws

Privacy preserving indoor localization on smartphones

LeMeniz Infotech

A privacy preserving framework for managing mobile ad requests and billing in...

LeMeniz Infotech

Mobile App Security: Enterprise Checklist

Jignesh Solanki

2015 AUG 24-Overview Version #2

Harriet Schneider

What is zero trust model of information security?

Ahmed Banafa

Peoplesoft Best Practices for Maintaining Security

Appsian

Peoplesoft Erp

Appsian

Running head: NETWORK INFRASTRUTCTURE AND SECURITY NETWORK INFRASTRUTCTURE AND SECURITY 11 Project Deliverable 4: Infrastructure and Security CIS498 June 4, 2017 Introduction Knight Inc will be growing in the next few years and it will require robust and reliable network infrastructure. The company will need to be sure that it data can be accessed and handled in an environment that is safe and technically sound. The solutions will need to be up to date and be updated regularly. Security is very important and it will be paid the utmost attention to ensure that no bad elements are allowed into the network to cause damage and endanger the company’s data and infrastructure. Logical and Physical Topographical Layout Star topology will be used for the physical network. This is where all devices in a network are connected to a central hub. All resources are drawn from this hub including bandwidth that allows access to cloud resources. Star topology simplifies the matter of network management as everything can be deployed from the central hub(Shinde, 2014). Bus topology will be used for the logical network. It is a topology where a backbone is the anchor on which computers connect to and request data and other resources. The logical network exists on a different subnet and as such can have different topology than the physical network. Computers are identified by IP addresses. Bus topology is good as it provides the computers with capabilities to access data as they need it by simply requesting (Shinde, 2014). Figure 1 - Physical Layout Figure 2 - Logical Layout Network Components Incorrectly deployed and configured firewalls and intrusion detection systems can be vulnerabilities to their networks. Given that they are meant to monitor traffic coming to and from the network and determine the harmful ones, this will not be accomplished. This makes it easy for malware to access the system. Fixing this requires that the firewall and the intrusion detection system be regularly checked for any signs of vulnerabilities and be fixed accordingly. (Peltier, 2013). New devices like smartphones and tablets can also cause problems for the network. These are usually used when the company has its operations hosted on a cloud. This then allows for access to data from a variety of devices, which is every device that can access the internet. For companies that allow its employees to use personal devices to access work data, they are especially vulnerable. Viruses could easily be uploaded to the cloud without even the device owner realizing. The fix is to ensure that all mobile devices used to access the cloud are company issued so that they can be assessed and equipped with the necessary security measures (Peltier, 2013). Old credentials could be used to access the network discreetly without raising suspicions, these could be the credentials of employees that have lef ...

Running head NETWORK INFRASTRUTCTURE AND SECURITYNETWORK INFR.docx

toltonkendal

Appsian securing mobile_ess_solution_brief

Appsian

Oruta privacy preserving public auditing for shared data in the cloud With cloud data services, it is common place for data to be not only stored in the cloud, but also shared across multiple users. Unfortunately, the integrity of cloud data is subject to skepticism due to the existence of hardware/software failures and human errors. Several mechanisms have been designed to allow both data owners and public verifiers to efficiently audit cloud data integrity without retrieving the entire data from the cloud server.

Oruta privacy preserving public auditing for shared data in the cloud

LeMeniz Infotech

Remote Access Policy Is A Normal Thing

Karen Oliver

Anonymous two factor authentication in distributed systems certain goals are ...

LeMeniz Infotech

Similar a Context based access control systems for mobile devices (20)